-
Notifications
You must be signed in to change notification settings - Fork 8.6k
[hasDataService] Permissions issue #132478
Copy link
Copy link
Closed
Labels
Feature:Data ViewsData Views code and UI - index patterns before 8.0Data Views code and UI - index patterns before 8.0Team:DataDiscoveryDiscover, search (data plugin and KQL), data views, saved searches. For ES|QL, use Team:ES|QL. t//Discover, search (data plugin and KQL), data views, saved searches. For ES|QL, use Team:ES|QL. t//bugFixes for quality problems that affect the customer experienceFixes for quality problems that affect the customer experienceimpact:highAddressing this issue will have a high level of impact on the quality/strength of our product.Addressing this issue will have a high level of impact on the quality/strength of our product.loe:needs-researchThis issue requires some research before it can be worked on or estimatedThis issue requires some research before it can be worked on or estimated
Metadata
Metadata
Assignees
Labels
Feature:Data ViewsData Views code and UI - index patterns before 8.0Data Views code and UI - index patterns before 8.0Team:DataDiscoveryDiscover, search (data plugin and KQL), data views, saved searches. For ES|QL, use Team:ES|QL. t//Discover, search (data plugin and KQL), data views, saved searches. For ES|QL, use Team:ES|QL. t//bugFixes for quality problems that affect the customer experienceFixes for quality problems that affect the customer experienceimpact:highAddressing this issue will have a high level of impact on the quality/strength of our product.Addressing this issue will have a high level of impact on the quality/strength of our product.loe:needs-researchThis issue requires some research before it can be worked on or estimatedThis issue requires some research before it can be worked on or estimated
Type
Fields
Give feedbackNo fields configured for issues without a type.
Describe the bug:
When testing the new index
hasDataservice, I have found two 3 permission issues. Two refer to when a user has no read index privileges.Scenario one:
readaccess to 1 of the indices, but not to the other twofalseand we will show a no data screen, thus blocking access to Discover. The user should be able to see the index they have access to.Scenario two:
falseand will show a no data screen. This is not as severe as a the first part (as from the user's standpoint there really is no data they could see), but it would be nice if the service would throw some sort of an error that we could leverage then to display an appropriate message.The third issue refers to a scenario where the user has
readaccess to the index, butno view_index_metadataprivileges. In that case the user has no permissions to view if they have permissions 🤯 I am not sure what the expected scenario here is but apparently this is a valid use-case. It feels like we shouldn't be blocking users from the access to the index they have access to.Can we get the fix for this prioritized for 8.3.0? cc @shivindera